$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: Q+Uow7YACNblKRUS5NwU1uBcfnuMNa9/gvrpg4VMSsQ= Subject key identifier: 10:87:7E:78:9B:4E:CE:FD:82:89:2B:84:78:F8:94:5C:87:AE:0B:6C Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 34C0 Signing time: Thu 24 Jul 2025 14:47:45 +0000 Manifest this update: Thu 24 Jul 2025 14:47:44 +0000 Manifest next update: Thu 31 Jul 2025 14:47:44 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: mwCxg2v5QierJEiaAS8XYTByUSn9FDPTX+fD5Gr1mxE=) 2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: AsLmLNpdLhba6hfcYMLpd0sVqrUh2auGXL+sqK0hCjo=) 3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: LT0aNSmVv5vvmR7dpu4yqP0BpA8hfoKsmy5XfMM5RqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 14:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Jul 24 14:47:44 2025 GMT Not After : Jul 31 14:47:44 2025 GMT Subject: CN=68824791-9656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:d6:b0:0c:1c:c6:b7:a6:0d:2c:7f:a6:13: 1d:65:3d:5b:b9:25:42:4d:d8:d4:68:e0:9d:f9:b9: 2d:5a:eb:19:86:5a:23:50:a0:66:31:11:58:b7:f9: 50:08:03:c7:27:c5:6e:5b:0c:a9:4e:83:df:7a:ce: 43:65:00:7e:f9:27:98:82:41:0a:b6:63:2c:89:aa: 92:ff:4d:70:07:64:62:9e:1b:91:00:7b:d0:18:31: 57:a3:af:d3:6b:8d:47:83:de:9d:65:79:1d:25:6f: 4b:ab:c3:4d:06:ed:45:28:73:92:8b:fa:dc:87:c2: 81:95:55:64:db:b3:76:b9:22:43:4c:2a:0d:38:59: 7e:c5:ab:aa:f2:0d:45:05:e8:44:98:76:0a:80:0d: 85:48:23:02:6e:ae:3d:3f:0d:65:9c:f9:c8:ec:37: d6:09:3b:4f:b8:97:80:45:f6:c1:56:e9:00:ab:e5: 18:43:65:1b:12:1e:5a:1f:b6:0b:f0:2f:9f:4a:2c: bb:29:ee:99:3e:56:9e:2e:e4:fd:a9:8c:eb:48:4b: a3:47:81:a0:49:a7:95:1a:e7:b8:5c:42:94:cf:0a: 53:04:26:12:c7:65:ec:91:55:07:9e:7c:e9:b7:e0: 8c:4d:c7:16:3d:53:61:b0:64:6a:9b:82:f6:78:0e: 68:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:87:7E:78:9B:4E:CE:FD:82:89:2B:84:78:F8:94:5C:87:AE:0B:6C X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ec:6b:c6:03:9a:e1:f5:90:dc:ff:01:95:b2:6e:2c:19:7a: 49:44:2e:38:1d:13:bb:14:d2:7a:7c:be:88:cf:51:c4:dd:6a: c3:f3:90:5a:a2:02:56:73:91:75:18:8f:6f:74:0d:a8:3b:24: 07:f7:c6:9e:2f:74:a7:09:26:9b:8d:4b:ba:dd:ea:8a:be:de: 16:67:ed:0f:d5:99:be:e0:9a:63:60:8c:f2:c0:77:54:d0:6e: 93:26:58:eb:7e:db:9f:d1:97:65:50:e0:7b:6d:ec:ff:3a:49: d2:ac:ca:87:2e:de:a6:47:cb:6f:4b:c2:8c:68:8c:62:3b:de: c3:e5:c8:44:7e:c1:cc:7c:f4:78:5a:a0:68:c3:59:6d:0b:2c: 3a:83:31:54:09:f3:07:c4:9e:d8:e8:d6:d1:a1:6e:89:b4:db: a3:05:12:92:f7:56:25:5b:ee:fb:07:fa:b2:11:0c:47:19:ad: d7:93:22:cb:5f:b3:d8:d3:59:6e:b5:d4:ea:ba:b9:d7:4f:d7: 6d:09:de:26:87:66:7e:af:42:5f:04:dd:39:4c:d2:89:1a:6a: b3:3d:30:5a:82:c5:87:26:a5:00:e4:df:03:ae:43:ff:40:12: 7c:36:ba:60:f3:8f:74:b0:ef:a2:43:7f:48:00:03:35:c9:1a: 15:cc:73:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjUwNzI0MTQ0NzQ0WhcNMjUwNzMxMTQ0NzQ0WjAYMRYwFAYD VQQDEw02ODgyNDc5MS05NjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnd3WsAwcxremDSx/phMdZT1buSVCTdjUaOCd+bktWusZhlojUKBmMRFYt/lQ CAPHJ8VuWwypToPfes5DZQB++SeYgkEKtmMsiaqS/01wB2RinhuRAHvQGDFXo6/T a41Hg96dZXkdJW9Lq8NNBu1FKHOSi/rch8KBlVVk27N2uSJDTCoNOFl+xauq8g1F BehEmHYKgA2FSCMCbq49Pw1lnPnI7DfWCTtPuJeARfbBVukAq+UYQ2UbEh5aH7YL 8C+fSiy7Ke6ZPlaeLuT9qYzrSEujR4GgSaeVGue4XEKUzwpTBCYSx2XskVUHnnzp t+CMTccWPVNhsGRqm4L2eA5ohQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCHfnib Ts79gokrhHj4lFyHrgtsMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP7GvGA5rh9ZDc/wGVsm4sGXpJRC44HRO7FNJ6fL6Iz1HE3WrD85Ba ogJWc5F1GI9vdA2oOyQH98aeL3SnCSabjUu63eqKvt4WZ+0P1Zm+4JpjYIzywHdU 0G6TJljrftuf0ZdlUOB7bez/OknSrMqHLt6mR8tvS8KMaIxiO97D5chEfsHMfPR4 WqBow1ltCyw6gzFUCfMHxJ7Y6NbRoW6JtNujBRKS91YlW+77B/qyEQxHGa3XkyLL X7PY01lutdTqurnXT9dtCd4mh2Z+r0JfBN05TNKJGmqzPTBagsWHJqUA5N8DrkP/ QBJ8Nrpg8490sO+iQ39IAAM1yRoVzHO6 -----END CERTIFICATE-----Generated at Sat Jul 26 08:01:44 2025 by rpki-client